Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/79efccf9-006b-3766-9b0b-02ae5cd0575b.roa
File:                     79efccf9-006b-3766-9b0b-02ae5cd0575b.roa (raw, json)
Hash identifier:          iIkm0px0prvs41aNou3wuOT8CQzCtvCxofmtEbYYpqk=
Subject key identifier:   3E:86:CA:72:83:F9:97:77:F1:98:30:44:81:D2:81:C0:9A:8D:33:A2
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE8639317B03ADD3BE62267C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/79efccf9-006b-3766-9b0b-02ae5cd0575b.roa
Signing time:             Tue 19 Aug 2025 11:28:56 +0000
ROA not before:           Tue 19 Aug 2025 11:28:56 +0000
ROA not after:            Mon 17 Nov 2025 12:28:56 +0000
asID:                     31898
IP address blocks:        158.247.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:63:93:17:b0:3a:dd:3b:e6:22:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 19 11:28:56 2025 GMT
            Not After : Nov 17 12:28:56 2025 GMT
        Subject: CN=cad71e86-c86c-4ca8-92ed-95cc24ab3feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1b:92:49:7b:90:43:ae:a0:a4:52:cd:c5:c1:
                    ef:6b:89:6d:64:ec:ce:c9:43:2f:bd:a5:29:c9:d5:
                    e6:04:f1:2f:e2:95:57:64:c5:de:52:6b:e9:80:a4:
                    40:9a:74:64:3e:cd:43:a6:0f:fd:ff:43:6a:70:13:
                    ed:41:d8:ed:ce:f7:96:88:61:d9:7d:42:94:a2:21:
                    a3:75:13:12:c4:45:0e:5c:3b:85:2a:ed:20:aa:05:
                    53:4f:8e:84:f7:26:bc:71:65:43:c0:4a:7a:26:93:
                    52:87:a4:c4:9e:bf:69:ae:da:42:81:57:40:58:39:
                    15:ee:1d:db:61:91:a3:73:c5:62:3c:f8:1c:aa:6f:
                    98:70:b2:97:16:f1:71:53:52:a7:42:b7:cd:b3:b6:
                    10:32:e6:cf:81:da:50:79:79:00:56:84:7a:ac:b3:
                    72:90:e0:8e:45:46:54:94:b8:81:07:5f:7e:68:dc:
                    ed:98:f6:03:be:9e:bb:fe:96:a6:e8:d5:f8:15:0e:
                    b8:69:96:92:e6:39:25:eb:e3:18:80:17:c3:c3:f1:
                    aa:b2:1c:23:cb:e8:5f:75:b5:e9:35:1a:b7:db:1e:
                    27:e2:da:c9:79:84:26:7b:bd:6f:7c:eb:25:33:ab:
                    17:da:b2:e9:0f:d2:f7:7c:c4:31:df:95:0e:6e:f8:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:86:CA:72:83:F9:97:77:F1:98:30:44:81:D2:81:C0:9A:8D:33:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/79efccf9-006b-3766-9b0b-02ae5cd0575b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.247.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e6:5f:0a:a4:ed:70:a0:a1:ce:5a:6c:cf:dc:75:92:3f:ef:
         d4:83:2b:f9:ec:ec:4d:2a:f9:55:fe:da:fe:a7:12:1f:b9:0c:
         8a:e2:09:8e:4e:18:ec:ab:73:22:d1:ad:ed:b5:99:bc:b8:71:
         c7:b4:fd:58:d1:15:6b:dc:5d:96:e9:84:6c:8d:ad:94:8c:0c:
         74:1c:53:4f:da:e7:8e:ab:bf:d2:3d:93:69:f5:48:81:2a:95:
         97:35:9e:77:d5:ed:9e:31:c9:a3:05:c7:e4:ab:41:3b:44:35:
         08:dc:ce:9d:5c:5b:36:24:3d:01:29:18:b0:43:74:2e:42:d7:
         23:5b:a4:a0:54:e8:ea:fc:98:6b:23:99:84:a5:b1:9f:f5:9a:
         0b:e8:cc:03:56:b0:93:ae:2d:11:17:ea:c9:92:7d:6a:20:d8:
         ce:05:14:a4:1f:ba:33:6f:a1:65:60:e9:46:f2:cf:ab:77:b9:
         f7:9e:29:1d:cb:bf:9d:65:f8:3d:84:ea:d9:a8:e3:c2:48:73:
         96:31:7b:fb:38:7a:d9:b2:1d:6b:ed:ed:2b:15:3f:0c:03:54:
         d7:84:87:ee:de:db:ca:ee:7b:4c:75:0d:99:68:bc:89:24:08:
         23:66:cf:87:b6:5b:fc:4c:16:6d:7f:fe:b2:e7:14:03:fc:52:
         82:f1:06:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEroY5MXsDrdO+YiZ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDgxOTExMjg1NloXDTI1MTExNzEyMjg1NlowLzEtMCsGA1UEAxMk
Y2FkNzFlODYtYzg2Yy00Y2E4LTkyZWQtOTVjYzI0YWIzZmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRuSSXuQQ66gpFLNxcHva4ltZOzOyUMvvaUp
ydXmBPEv4pVXZMXeUmvpgKRAmnRkPs1Dpg/9/0NqcBPtQdjtzveWiGHZfUKUoiGj
dRMSxEUOXDuFKu0gqgVTT46E9ya8cWVDwEp6JpNSh6TEnr9prtpCgVdAWDkV7h3b
YZGjc8ViPPgcqm+YcLKXFvFxU1KnQrfNs7YQMubPgdpQeXkAVoR6rLNykOCORUZU
lLiBB19+aNztmPYDvp67/pam6NX4FQ64aZaS5jkl6+MYgBfDw/Gqshwjy+hfdbXp
NRq32x4n4trJeYQme71vfOslM6sX2rLpD9L3fMQx35UObvhG1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6GynKD+Zd38ZgwRIHSgcCajTOiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzllZmNjZjktMDA2Yi0z
NzY2LTliMGItMDJhZTVjZDA1NzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnvdwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI7mXwqk7XCgoc5abM/cdZI/79SDK/ns7E0q+VX+2v6nEh+5DIriCY5O
GOyrcyLRre21mby4cce0/VjRFWvcXZbphGyNrZSMDHQcU0/a546rv9I9k2n1SIEq
lZc1nnfV7Z4xyaMFx+SrQTtENQjczp1cWzYkPQEpGLBDdC5C1yNbpKBU6Or8mGsj
mYSlsZ/1mgvozANWsJOuLREX6smSfWog2M4FFKQfujNvoWVg6Ubyz6t3ufeeKR3L
v51l+D2E6tmo48JIc5Yxe/s4etmyHWvt7SsVPwwDVNeEh+7e28rue0x1DZlovIkk
CCNmz4e2W/xMFm1//rLnFAP8UoLxBvw=
-----END CERTIFICATE-----
Generated at Wed Aug 20 03:33:45 2025 by rpki-client